File "otp.php"

Full Path: /home/cananyalcin/public_html/core/module/client/otp.php
File size: 2.12 KB
MIME-type: text/x-php
Charset: utf-8

<?php

$email= $_SESSION['email'];

   if(route(1)== "send"){
       $otp_code = rand(100000, 999999);

    $_SESSION['otp'] = $otp_code;
 
   
       if (send_email($email, $otp_code)) {
        echo json_encode(['status' => 'success']);
     } else {
        echo json_encode(['status' => 'error']);
 
    }
   
    }
if($_SESSION['otp']){
    
 
 
    if($_POST){
     if(isset($_SESSION['otp']) && $_POST["otp"] == $_SESSION['otp']){
    $otp=true;  
  }else{
    
$otp=false;
 	
     
}
      if ($otp) {
          
          $row    = $conn->prepare("SELECT * FROM clients WHERE email=:email");
    $row  -> execute(array("email"=>$email  ));
    $row    = $row->fetch(PDO::FETCH_ASSOC);
    $access = json_decode($row["access"],true);

          
                 $_SESSION["neira_adminlogin"] = 1;
	    $_SESSION["neira_userlogin"]      = 1;
	    $_SESSION["neira_userid"]         = $row["client_id"];
	   
 	    $_SESSION["recaptcha"]                = false;
	
	      if( $access["admin_access"] ):
	        setcookie("a_login", 'ok', time()+(60*60*24*7), '/', null, null, true );
	      endif;
	      setcookie("u_id", $row["client_id"], time()+(60*60*24*7), '/', null, null, true );
	      setcookie("u_password", $row["password"], time()+(60*60*24*7), '/', null, null, true );
	      setcookie("u_login", 'ok', time()+(60*60*24*7), '/', null, null, true );
	    
 
	    
 	      $insert = $conn->prepare("INSERT INTO client_report SET client_id=:c_id, action=:action, report_ip=:ip, report_date=:date ");
	      $insert->execute(array("c_id"=>$row["client_id"],"action"=>"Admin logged in.","ip"=>GetIP(),"date"=>date("Y-m-d H:i:s") ));
	      $update = $conn->prepare("UPDATE clients SET login_date=:date, login_ip=:ip WHERE client_id=:c_id ");
	      $update->execute(array("c_id"=>$row["client_id"],"date"=>date("Y.m.d H:i:s"),"ip"=>GetIP() ));
          
          	    unset($_SESSION['otp']);
	    header('Location:'.site_url('admin'));

          
      
      }else{
          	$error      = 1;
    	$errorText  = "OTP INVALID.";
    
      }
    }
          require admin_view(otp);
          
}else{
    require PATH.'/core/temp/404.php';
    
}